Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
Urgent
Important
Warning
Warning
CVE
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
脅威度ソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Jan. 12, 2025, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
190091 4.3 警告 オラクル - Oracle Application Server 11i の Rapid Install Web Server におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3553 2012-09-25 16:47 2007-07-3 Show GitHub Exploit DB Packet Storm
190092 4.3 警告 Tenable, Inc. - Nessus Vulnerability Scanner の Windows GUI におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3546 2012-09-25 16:47 2007-07-3 Show GitHub Exploit DB Packet Storm
190093 7.8 危険 IBM - iSeries マシン上の IBM OS/400 におけるファイアーウォールルールを回避される脆弱性 - CVE-2007-3537 2012-09-25 16:47 2007-06-28 Show GitHub Exploit DB Packet Storm
190094 7.2 危険 NVIDIA - Gentoo Linux で使用される nvidia-drivers におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-3532 2012-09-25 16:47 2007-06-28 Show GitHub Exploit DB Packet Storm
190095 7.5 危険 hispah - youtubeclone の msg.php における SQL インジェクションの脆弱性 - CVE-2007-3518 2012-09-25 16:47 2007-07-3 Show GitHub Exploit DB Packet Storm
190096 7.5 危険 カスペルスキー - Kaspersky Anti-Spam の Web ベース製品における特定のディレクトリへのアクセス権を取得される脆弱性 - CVE-2007-3502 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
190097 4.3 警告 htmlpurifier - HTML Purifier の smoketests/configForm.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3498 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
190098 5 警告 マイクロソフト - Microsoft Internet Explorer 7 におけるページ履歴の存在を特定される脆弱性 - CVE-2007-3497 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
190099 6.8 警告 Papoo Software - Papoo CMS におけるデータベース全体を読まれる脆弱性 - CVE-2007-3494 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
190100 7.5 危険 マイクロソフト
nctsoft products		 - NCTAudioStudio2 の NCTWavChunksEditor2.dll における任意のファイルを上書きされる脆弱性 - CVE-2007-3493 2012-09-25 16:47 2007-06-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:Jan. 13, 2025, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
331 - - - Incorrect Authorization vulnerability in Drupal Freelinking allows Forceful Browsing.This issue affects Freelinking: from 0.0.0 before 4.0.1. New - CVE-2024-13270 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
332 - - - Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Advanced Varnish allows Forceful Browsing.This issue affects Advanced Varnish: from 0.0.0 before 4.0.11. New - CVE-2024-13269 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
333 - - - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno allows PHP Local File Inclusion.This issue affects Opigno: from 7.X-1.0 before … New - CVE-2024-13268 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
334 - - - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno TinCan Question Type allows PHP Local File Inclusion.This issue affects Opigno … New - CVE-2024-13267 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
335 - - - Incorrect Authorization vulnerability in Drupal Responsive and off-canvas menu allows Forceful Browsing.This issue affects Responsive and off-canvas menu: from 0.0.0 before 4.4.4. New - CVE-2024-13266 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
336 - - - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability in Drupal Opigno Learning path allows PHP Local File Inclusion.This issue affects Opigno Learnin… New - CVE-2024-13265 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
337 9.8 CRITICAL
Network 		- - The WPBookit plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.6.4. This is due to the plugin providing user-controlled access to objects, letti… New CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-10215 2025-01-10 05:15 2025-01-10 Show GitHub Exploit DB Packet Storm
338 - - - Strawberry GraphQL is a library for creating GraphQL APIs. Starting in 0.182.0 and prior to version 0.257.0, a type confusion vulnerability exists in Strawberry GraphQL's relay integration that affec… New CWE-843
Type Confusion 		CVE-2025-22151 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
339 7.5 HIGH
Network 		- - An Out-of-bounds Read vulnerability in Juniper Networks Junos OS and Junos OS Evolved's routing protocol daemon (rpd) allows an unauthenticated, network-based attacker to send malformed BGP packets t… New CWE-125
Out-of-bounds Read 		CVE-2025-21598 2025-01-10 04:15 2025-01-10 Show GitHub Exploit DB Packet Storm
340 - - - JWK Set (JSON Web Key Set) is a JWK and JWK Set Go implementation. Prior to 0.6.0, the project's provided HTTP client's local JWK Set cache should do a full replacement when the goroutine refreshes t… New CWE-672
 Operation on a Resource after Expiration or Release 		CVE-2025-22149 2025-01-10 03:15 2025-01-10 Show GitHub Exploit DB Packet Storm